Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.cer
File:                     6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.cer (raw, json)
Hash identifier:          gIMLs19t/6QbJ9WHD+C1dMHF/alhaZsZxn/kVuJem1w=
Subject key identifier:   6F:A4:A5:CA:DE:E7:A7:4F:91:95:D9:A0:0E:09:AD:8C:D8:83:F5:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4776D7EA3B5F9DE52DDB24BF3019B464796D8DFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 17:57:49 +0000
Certificate not after:    Fri 15 Dec 2023 18:02:49 +0000
Subordinate resources:    AS: 270695
                          IP: 181.192.112.0/22
                          IP: 2804:6fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:76:d7:ea:3b:5f:9d:e5:2d:db:24:bf:30:19:b4:64:79:6d:8d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 17:57:49 2022 GMT
            Not After : Dec 15 18:02:49 2023 GMT
        Subject: CN=6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:ae:4e:0f:14:e0:c6:69:6d:2d:f0:7b:7e:
                    e5:88:14:38:23:9e:4e:36:1b:60:74:89:08:96:37:
                    14:bc:d0:b5:c4:58:ca:f7:68:4f:02:9d:bf:80:19:
                    20:56:db:a4:f6:b1:c6:41:5f:84:af:1d:9a:fd:0b:
                    7a:28:2f:3a:9b:a4:d3:5c:fe:71:62:8f:9a:56:da:
                    29:18:48:e9:aa:28:b3:82:2f:49:74:6b:bc:48:66:
                    fd:a2:60:9f:ac:ec:ec:48:5c:f6:b0:8f:0f:e6:76:
                    64:45:cc:29:0a:c3:e6:ba:80:ee:ca:fa:05:a2:07:
                    24:83:cb:af:98:2d:db:80:b8:55:f8:07:00:cc:5e:
                    53:cc:2d:2a:1c:84:7b:ee:ad:04:eb:14:fa:11:92:
                    53:07:f0:60:a1:c9:b3:70:6a:f9:57:85:56:0d:52:
                    03:19:9f:0e:e3:60:51:6b:6c:26:b5:fe:59:cf:e1:
                    79:60:17:1a:5a:09:b1:b1:c7:57:85:19:3a:e6:12:
                    b5:39:40:ff:b0:bd:69:35:71:5c:6c:10:ab:98:45:
                    ad:53:08:95:0a:85:70:1c:d7:0b:4e:7b:e5:4d:d8:
                    6e:e9:96:2e:e6:c1:fc:44:32:61:ef:ed:09:50:89:
                    23:bf:7d:4b:98:e0:d8:ca:80:77:35:5c:86:66:18:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:A4:A5:CA:DE:E7:A7:4F:91:95:D9:A0:0E:09:AD:8C:D8:83:F5:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/6FA4A5CADEE7A74F9195D9A00E09AD8CD883F5CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/22
                IPv6:
                  2804:6fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270695

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:08:8f:3e:b3:97:9c:3e:e0:3f:54:6f:39:25:6b:64:71:
         0a:ad:7f:23:f6:e9:4d:08:97:78:69:a5:c4:b8:51:6d:7e:d9:
         aa:93:16:81:15:d3:5c:59:27:e5:1e:ec:56:ea:61:7c:f7:be:
         38:80:1d:dd:18:b4:0f:8c:64:d2:6d:6c:06:a1:aa:0d:76:61:
         b6:05:9e:3c:90:18:b3:05:cc:31:e1:9a:85:cc:5c:49:fd:88:
         29:4c:a3:9f:d8:4f:ec:40:a0:a9:9c:91:c8:23:47:6b:1c:0f:
         6d:14:f6:76:b7:2f:f2:0d:00:41:a8:85:b8:f2:bb:e9:de:fe:
         f1:b5:ad:fe:3f:1a:64:24:53:93:d5:88:f9:01:0f:67:bc:77:
         c6:30:28:b8:ae:c2:c6:d2:b5:f7:36:32:17:0a:7b:aa:f5:38:
         ab:3e:89:61:c3:00:a2:65:7a:ee:40:8a:93:4e:e9:aa:0d:6c:
         4a:7d:1d:f3:05:c9:64:ab:89:76:08:74:b9:83:93:bd:4f:25:
         25:1c:64:b4:8a:16:8d:9d:95:ce:61:4b:3f:82:98:d3:17:96:
         cc:78:44:46:f4:7a:f6:5a:93:9a:72:65:e7:67:61:b1:42:9f:
         66:ab:7b:0a:1f:58:14:8e:f7:b4:16:89:df:00:d1:a3:8e:8f:
         6c:74:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org